Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: hKjXbiBzcAy91pHsz5DNWfZXGi2Aw3KN/bsPpSmBRhI=
Subject key identifier: 6B:7B:78:3B:BC:42:AC:1B:A5:87:5F:D1:17:C6:26:4B:EE:D6:6E:1B
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 019D2583C2457B028709B9AB8DCAED7606E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 0636
Signing time: Wed 25 Mar 2026 15:01:25 +0000
Manifest this update: Wed 25 Mar 2026 15:01:25 +0000
Manifest next update: Thu 26 Mar 2026 15:01:25 +0000
Files and hashes: 1: F0sSuH9iYHPrHq28J6vj4APvT6M.roa (hash: 2FFuLU5ejEPJNZsPwPlVu1B2UXAql1qbkT9CH1KvKBQ=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: VpAZ9PWSvdGiEcWI8RinhgLVUdwxlp3N3JasQv9ZRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c2:45:7b:02:87:09:b9:ab:8d:ca:ed:76:06:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Mar 25 15:01:25 2026 GMT
Not After : Mar 26 15:01:25 2026 GMT
Subject: CN=6b7b783bbc42ac1ba5875fd117c6264beed66e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:4f:6d:8f:3a:3d:36:60:f9:9e:b4:6c:7d:
27:b4:c8:ee:56:dd:66:7f:39:d8:4d:38:58:e6:2b:
9e:11:bf:88:82:5b:7c:b3:48:77:1a:d5:ac:1c:49:
0a:ec:92:b6:3b:50:37:a8:4f:6d:37:1e:f3:ab:31:
f1:4a:6f:38:fa:fb:71:81:fb:ba:c0:90:40:97:d7:
1d:38:9a:e0:e4:20:ae:7b:30:02:44:4d:66:b5:5e:
f8:88:f6:96:2f:09:4b:26:ea:11:8b:03:bc:de:47:
f2:a7:33:9d:25:eb:1d:08:0a:82:d8:25:dd:f7:6f:
e4:6a:99:4f:46:8f:19:bf:11:f9:5d:04:dd:be:f6:
15:f7:c1:df:69:9d:3c:f8:5e:d7:27:1b:62:8a:6d:
ac:eb:d4:c2:f4:ea:62:d4:7b:4e:5f:27:a0:ba:a0:
d9:00:0a:30:56:f9:cd:d7:ea:29:8b:58:3e:51:ec:
7b:c2:24:16:88:92:e8:1c:88:d5:41:06:3c:a4:ef:
79:bc:24:e9:ad:78:ea:ca:06:fb:8a:a4:bf:ae:38:
80:b3:4d:55:56:eb:86:0f:b1:83:35:9d:41:0a:23:
95:f0:73:49:dd:20:7e:37:8d:49:39:f6:f1:19:31:
90:0d:aa:b1:47:9a:09:1f:e7:40:fd:ac:38:7c:41:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:78:3B:BC:42:AC:1B:A5:87:5F:D1:17:C6:26:4B:EE:D6:6E:1B
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:ad:d6:3e:7c:c5:39:88:b3:13:95:bc:b7:25:2c:68:e1:
c6:be:13:1c:5a:24:d9:20:91:d3:79:04:4b:9c:e3:63:09:20:
ea:88:5e:d4:5b:09:da:a5:0c:70:f1:41:b2:aa:84:3f:2f:6c:
d9:c0:20:14:ee:79:1e:5b:50:86:ad:61:9e:15:b6:f7:dd:b8:
cc:ea:19:1e:73:fd:4d:c3:26:3d:90:8a:65:21:d2:dc:85:87:
90:14:c5:68:38:b9:9a:da:43:8b:63:74:30:e0:21:01:b8:be:
28:e6:4d:c2:ad:d1:5f:75:1c:f0:0b:96:fe:97:f1:7e:95:5f:
14:ae:b7:ee:d5:b4:95:4b:1f:07:27:e5:c4:6e:3a:a6:30:2d:
e0:2e:b9:fd:a0:ee:96:d5:0d:4d:af:7f:f1:c4:b0:8d:f8:fd:
10:9e:db:cf:ae:8b:5b:da:d4:7c:51:a5:0f:62:07:c8:7e:73:
f4:b0:df:d0:ef:11:98:76:aa:b3:5a:2a:d2:e0:1a:40:a6:a7:
7e:96:65:99:c6:f1:19:60:39:59:71:e4:78:91:ed:27:1c:cf:
36:78:0f:34:b6:45:5b:9a:a3:83:35:0e:02:c3:66:64:6b:87:
8d:1e:12:cb:7f:61:a6:e1:e8:f7:e0:51:25:a0:5f:51:16:79:
2a:bb:b3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg8JFewKHCbmrjcrtdgbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWY4MjNhZjk5M2IzOTk1YzllNWZmNGMyMjhiZGY5OTQ1
MWZiOGEwHhcNMjYwMzI1MTUwMTI1WhcNMjYwMzI2MTUwMTI1WjAzMTEwLwYDVQQD
Eyg2YjdiNzgzYmJjNDJhYzFiYTU4NzVmZDExN2M2MjY0YmVlZDY2ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+pPbY86PTZg+Z60bH0ntMjuVt1m
fznYTThY5iueEb+Iglt8s0h3GtWsHEkK7JK2O1A3qE9tNx7zqzHxSm84+vtxgfu6
wJBAl9cdOJrg5CCuezACRE1mtV74iPaWLwlLJuoRiwO83kfypzOdJesdCAqC2CXd
92/kaplPRo8ZvxH5XQTdvvYV98HfaZ08+F7XJxtiim2s69TC9Opi1HtOXyeguqDZ
AAowVvnN1+opi1g+Uex7wiQWiJLoHIjVQQY8pO95vCTprXjqygb7iqS/rjiAs01V
VuuGD7GDNZ1BCiOV8HNJ3SB+N41JOfbxGTGQDaqxR5oJH+dA/aw4fEHOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt7eDu8QqwbpYdf0RfGJkvu1m4bMB8GA1UdIwQY
MBaAFI+fgjr5k7OZXJ5f9MIovfmUUfuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEt
MTUxMTY4OWMzYzhhLzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEtMTUxMTY4OWMzYzhh
LzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6Wt1j58
xTmIsxOVvLclLGjhxr4THFok2SCR03kES5zjYwkg6ohe1FsJ2qUMcPFBsqqEPy9s
2cAgFO55HltQhq1hnhW29924zOoZHnP9TcMmPZCKZSHS3IWHkBTFaDi5mtpDi2N0
MOAhAbi+KOZNwq3RX3Uc8AuW/pfxfpVfFK637tW0lUsfByflxG46pjAt4C65/aDu
ltUNTa9/8cSwjfj9EJ7bz66LW9rUfFGlD2IHyH5z9LDf0O8RmHaqs1oq0uAaQKan
fpZlmcbxGWA5WXHkeJHtJxzPNngPNLZFW5qjgzUOAsNmZGuHjR4Sy39hpuHo9+BR
JaBfURZ5KruzPg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:44 2026 by rpki-client